Generate KUBECONFIG for Yandex.Cloud Managed Kubernetes. https://cloud.yandex.ru/docs/managed-kubernetes/operations/create-static-conf

gen.sh

#!/bin/bash

FOLDER_ID=<FOLDER_ID>
CLUSTER_ID=<CLUSTER_ID>
CLUSTER_NAME=<CLUSTER_NAME>

DIR=./$CLUSTER_NAME

set -xe

mkdir -p $DIR

yc --folder-id=$FOLDER_ID managed-kubernetes cluster get --id $CLUSTER_ID --format json | \
    jq -r .master.master_auth.cluster_ca_certificate | \
    awk '{gsub(/\\n/,"\n")}1' > $DIR/ca.pem

kubectl create -f ./sa.yaml

SA_TOKEN=$(kubectl -n kube-system get secret $(kubectl -n kube-system get secret | \
    grep admin-user | \
    awk '{print $1}') -o json | \
    jq -r .data.token | \
    base64 --d)

MASTER_ENDPOINT=$(yc --folder-id=$FOLDER_ID managed-kubernetes cluster get --id $CLUSTER_ID \
    --format json | \
    jq -r .master.endpoints.internal_v4_endpoint)

kubectl config set-cluster $CLUSTER_NAME \
               --certificate-authority=$DIR/ca.pem --embed-certs \
               --server=$MASTER_ENDPOINT \
               --kubeconfig=$DIR/config.yaml

kubectl config set-credentials admin-user \
                --token=$SA_TOKEN \
                --kubeconfig=$DIR/config.yaml

kubectl config set-context $CLUSTER_NAME \
               --cluster=$CLUSTER_NAME \
               --user=admin-user \
               --kubeconfig=$DIR/config.yaml

kubectl config use-context $CLUSTER_NAME \
               --kubeconfig=$DIR/config.yaml

sa.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user
  namespace: kube-system